@ddd-ts-kit/kernel 0.7.0 → 0.8.0

package/dist/infrastructure/in-memory/in-memory-tenant-directory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-tenant-directory.js","sourceRoot":"","sources":["../../../src/infrastructure/in-memory/in-memory-tenant-directory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,+CAA+C,CAAC;AAE/E,mIAAmI;AACnI,MAAM,OAAO,uBAAuB;IACjB,GAAG,CAAoB;IAExC,YAAY,GAAsB;QAChC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACrC,CAAC;IAED,OAAO;QACL,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/infrastructure/tenancy/tenant-isolation-policies.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The names of the row-level security policies of a table of tenant data, in every adapter: one
+ * per command, because PostgreSQL applies the `using` of a single policy to the rows a `delete`
+ * or an `update` targets. Reads see the reach of the work; inserts, updates and deletes only ever
+ * touch the rows of its one tenant, elevated or not.
+ */
+export declare const TENANT_ISOLATION_POLICIES: {
+    readonly select: 'tenant_isolation_select';
+    readonly insert: 'tenant_isolation_insert';
+    readonly update: 'tenant_isolation_update';
+    readonly delete: 'tenant_isolation_delete';
+};
+//# sourceMappingURL=tenant-isolation-policies.d.ts.map

package/dist/infrastructure/tenancy/tenant-isolation-policies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-isolation-policies.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/tenancy/tenant-isolation-policies.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;aACpC,MAAM,EAAE,yBAAyB;aACjC,MAAM,EAAE,yBAAyB;aACjC,MAAM,EAAE,yBAAyB;aACjC,MAAM,EAAE,yBAAyB;CACzB,CAAC"}

package/dist/infrastructure/tenancy/tenant-isolation-policies.js

@@ -0,0 +1,13 @@
+/**
+ * The names of the row-level security policies of a table of tenant data, in every adapter: one
+ * per command, because PostgreSQL applies the `using` of a single policy to the rows a `delete`
+ * or an `update` targets. Reads see the reach of the work; inserts, updates and deletes only ever
+ * touch the rows of its one tenant, elevated or not.
+ */
+export const TENANT_ISOLATION_POLICIES = {
+    select: 'tenant_isolation_select',
+    insert: 'tenant_isolation_insert',
+    update: 'tenant_isolation_update',
+    delete: 'tenant_isolation_delete',
+};
+//# sourceMappingURL=tenant-isolation-policies.js.map

package/dist/infrastructure/tenancy/tenant-isolation-policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-isolation-policies.js","sourceRoot":"","sources":["../../../src/infrastructure/tenancy/tenant-isolation-policies.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,yBAAyB;CACzB,CAAC"}

package/dist/infrastructure/tenancy/tenant-policy-expressions.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The expressions of the row-level security policies on a column, quoted as SQL. `read`: the row
+ * belongs to `ddd_ts_kit.tenant_id`, to a tenant of `ddd_ts_kit.reach`, or
+ * `ddd_ts_kit.every_tenant` is `on`. `write`: the row belongs to `ddd_ts_kit.tenant_id`, whatever
+ * an elevation widened. Work that set nothing reads nothing and writes nothing.
+ */
+export declare function tenantPolicyExpressions(column: string): {
+    readonly read: string;
+    readonly write: string;
+};
+//# sourceMappingURL=tenant-policy-expressions.d.ts.map

package/dist/infrastructure/tenancy/tenant-policy-expressions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-policy-expressions.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/tenancy/tenant-policy-expressions.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAOzG"}

package/dist/infrastructure/tenancy/tenant-policy-expressions.js

@@ -0,0 +1,15 @@
+import { TENANT_SETTINGS } from './tenant-settings.js';
+/**
+ * The expressions of the row-level security policies on a column, quoted as SQL. `read`: the row
+ * belongs to `ddd_ts_kit.tenant_id`, to a tenant of `ddd_ts_kit.reach`, or
+ * `ddd_ts_kit.every_tenant` is `on`. `write`: the row belongs to `ddd_ts_kit.tenant_id`, whatever
+ * an elevation widened. Work that set nothing reads nothing and writes nothing.
+ */
+export function tenantPolicyExpressions(column) {
+    const setting = (name) => `current_setting('${name}', true)`;
+    const tenant = `${column} = ${setting(TENANT_SETTINGS.tenant)}`;
+    const reach = `${column} = any(string_to_array(${setting(TENANT_SETTINGS.reach)}, ','))`;
+    const everyTenant = `${setting(TENANT_SETTINGS.everyTenant)} = 'on'`;
+    return { read: `${tenant} or ${reach} or ${everyTenant}`, write: tenant };
+}
+//# sourceMappingURL=tenant-policy-expressions.js.map

package/dist/infrastructure/tenancy/tenant-policy-expressions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-policy-expressions.js","sourceRoot":"","sources":["../../../src/infrastructure/tenancy/tenant-policy-expressions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,oBAAoB,IAAI,UAAU,CAAC;IAC7E,MAAM,MAAM,GAAG,GAAG,MAAM,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;IAChE,MAAM,KAAK,GAAG,GAAG,MAAM,0BAA0B,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC;IACzF,MAAM,WAAW,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC,WAAW,CAAC,SAAS,CAAC;IAErE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,KAAK,OAAO,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC5E,CAAC"}

package/dist/infrastructure/tenancy/tenant-setting-values.d.ts

@@ -0,0 +1,13 @@
+import type { ExecutionContext } from '../../application/execution/execution-context.js';
+/**
+ * The values of `TENANT_SETTINGS` for the work in progress, which a unit of work under
+ * row-level security sets per transaction: empty for work that names no tenant. Every tenant id
+ * is checked against the grammar of `isTenantId` again here, the last step before SQL, so that a
+ * context built by hand can never set a list or a wildcard; only an elevation sets the reach.
+ */
+export declare function tenantSettingValues(context: ExecutionContext | undefined): {
+    tenant: string;
+    reach: string;
+    everyTenant: string;
+};
+//# sourceMappingURL=tenant-setting-values.d.ts.map

package/dist/infrastructure/tenancy/tenant-setting-values.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-setting-values.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/tenancy/tenant-setting-values.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kDAAkD,CAAC;AAGzF;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,GAAG;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB,CAaA"}

package/dist/infrastructure/tenancy/tenant-setting-values.js

@@ -0,0 +1,19 @@
+import { assertTenantId } from '../../application/tenancy/assert-tenant-id.js';
+/**
+ * The values of `TENANT_SETTINGS` for the work in progress, which a unit of work under
+ * row-level security sets per transaction: empty for work that names no tenant. Every tenant id
+ * is checked against the grammar of `isTenantId` again here, the last step before SQL, so that a
+ * context built by hand can never set a list or a wildcard; only an elevation sets the reach.
+ */
+export function tenantSettingValues(context) {
+    const tenant = context?.tenantId === undefined ? '' : assertTenantId(context.tenantId);
+    const elevation = context?.elevation;
+    if (elevation === undefined) {
+        return { tenant, reach: '', everyTenant: '' };
+    }
+    if (elevation.tenants === 'all') {
+        return { tenant, reach: '', everyTenant: 'on' };
+    }
+    return { tenant, reach: elevation.tenants.map(assertTenantId).join(','), everyTenant: '' };
+}
+//# sourceMappingURL=tenant-setting-values.js.map

package/dist/infrastructure/tenancy/tenant-setting-values.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-setting-values.js","sourceRoot":"","sources":["../../../src/infrastructure/tenancy/tenant-setting-values.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,+CAA+C,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAqC;IAKvE,MAAM,MAAM,GAAG,OAAO,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvF,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC;IAErC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAChD,CAAC;IAED,IAAI,SAAS,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAChC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAClD,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;AAC7F,CAAC"}

package/dist/infrastructure/tenancy/tenant-settings.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The three settings of a transaction that the row-level security policies read:
+ * `ddd_ts_kit.tenant_id`, the one tenant a write may name (and a read sees);
+ * `ddd_ts_kit.reach`, the other tenants an elevation lets a read see, separated by commas; and
+ * `ddd_ts_kit.every_tenant`, `on` only for an elevation over every tenant. Work that is not
+ * elevated sets the last two empty, so that nothing a tenant id holds can widen a read.
+ */
+export declare const TENANT_SETTINGS: {
+    readonly tenant: 'ddd_ts_kit.tenant_id';
+    readonly reach: 'ddd_ts_kit.reach';
+    readonly everyTenant: 'ddd_ts_kit.every_tenant';
+};
+//# sourceMappingURL=tenant-settings.d.ts.map

package/dist/infrastructure/tenancy/tenant-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-settings.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/tenancy/tenant-settings.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,eAAe;aAC1B,MAAM,EAAE,sBAAsB;aAC9B,KAAK,EAAE,kBAAkB;aACzB,WAAW,EAAE,yBAAyB;CAC9B,CAAC"}

package/dist/infrastructure/tenancy/tenant-settings.js

@@ -0,0 +1,13 @@
+/**
+ * The three settings of a transaction that the row-level security policies read:
+ * `ddd_ts_kit.tenant_id`, the one tenant a write may name (and a read sees);
+ * `ddd_ts_kit.reach`, the other tenants an elevation lets a read see, separated by commas; and
+ * `ddd_ts_kit.every_tenant`, `on` only for an elevation over every tenant. Work that is not
+ * elevated sets the last two empty, so that nothing a tenant id holds can widen a read.
+ */
+export const TENANT_SETTINGS = {
+    tenant: 'ddd_ts_kit.tenant_id',
+    reach: 'ddd_ts_kit.reach',
+    everyTenant: 'ddd_ts_kit.every_tenant',
+};
+//# sourceMappingURL=tenant-settings.js.map

package/dist/infrastructure/tenancy/tenant-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-settings.js","sourceRoot":"","sources":["../../../src/infrastructure/tenancy/tenant-settings.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,MAAM,EAAE,sBAAsB;IAC9B,KAAK,EAAE,kBAAkB;IACzB,WAAW,EAAE,yBAAyB;CAC9B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ddd-ts-kit/kernel",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Framework-agnostic DDD building blocks, application ports and an in-memory event bus.",
   "license": "MIT",
   "repository": {